# WRT (Weighted Risk Trend)

Our team decided to adopt best practices and draw inspiration from [HP's ideas](https://owasp.org/www-pdf-archive/Magic_Numbers_-_5_KPIs_for_Measuring_WebAppSec_Program_Success_v3.2.pdf), which led us to discover overlaps with the widely used *error budget* practice. We believe that utilizing the WRT metric would be a suitable solution to enhance security operations.

**Weighted Risk Trend** (WRT) is one of a **Key Performance Indicators** (KPIs) and provides **business-level context** to security-generated data.

**WRT metric** is a measure that expresses the state of security in numerical terms, without diving into technical details. The metric is linked to **business criticality**, which is linked to the risks associated with the vulnerabilities that exploit them. WRT can provide business value by helping teams identify and address security risks.

WRT is calculated using the formula:

<figure><img src="/files/THrPUnqPd0aJSfUKbsrM" alt=""><figcaption></figcaption></figure>

* each type of **multiplier** is equal to the corresponding severity weight;
* **defects** is equal to the number of findings of this severity type;
* **business criticality** — an assessment of the importance of the product to the company, ranging from one to ten.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.whitespots.io/appsec-portal/features/security-metrics/wrt-weighted-risk-trend.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
